feat(a2a): sealed git token for private tenant clones - #134
Merged
Conversation
… FuzeAgent) 16/20 Fuze repos are private (FuzeAgent flipped to private too), so the repo-sync init container needs a git-read token to clone them. Seals an a2a-repos-git SealedSecret (encrypted for fuzeagent/a2a-repos-git; only this cluster's controller decrypts) and points deploy.reposGitTokenSecretRef at it. Unblocks private tenants and keeps FuzeAgent durable (its card was serving off a cached clone; next roll would fail tokenless). Token sealed from the operator's authenticated gh, never exposed. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session-Id: 17fb89fd-3579-433b-a6c4-9c9e7f3ec549
izzywdev
added a commit
that referenced
this pull request
Jul 26, 2026
FuzePlan role merged (#151) + git token wired (#134) → add as tenant so its card resolves. Claude-Session-Id: 17fb89fd-3579-433b-a6c4-9c9e7f3ec549 Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
16/20 repos are private (incl. FuzeAgent now). Adds the
a2a-repos-gitSealedSecret (sealed from the operator's gh, encrypted for fuzeagent/a2a-repos-git) + pointsreposGitTokenSecretRefat it, so repo-sync can clone private tenants and FuzeAgent stays durable across rolls.